papers.bib

---
---


@inproceedings{bioharm,
  title={Biosignal Authentication Considered Harmful Today},
  author={Krish, Veena and Paoletti, Nicola and Kazemi, Milad and Smolka, Scott and Rahmati, Amir},
  booktitle={USENIX Security Symposium (USENIX Sec)},
  month=8,
  year={2024}
}

@inproceedings{rose_glasses,
  title={Taking off the Rose-Tinted Glasses: A Critical Look at Adversarial ML Attacks},
  author={Eykholt, Kevin and Ahmed, Farhan and Vaishnavi, Pratik and Rahmati, Amir},
  booktitle={USENIX Security Symposium (USENIX Sec)},
  month=8,
  year={2024}
}

@inproceedings{zero-one_attack,
  title={Zero-One Attack: Degrading Closed-Loop Neural Network Control Systems using State-Time Perturbations},
  author={Bak, Stanley and Bogomolov, Sergiy and Hekal, Abdelrahman and Krish, Veena and Mata, Andrew and Rahmati, Amir},
  booktitle={International Conference on Cyber-Physical Systems (ICCPS)},
  month=5,
  year={2024}
}

@inproceedings{koopman_falsification,
  title={Falsification using Reachability of Surrogate Koopman Models},
  author={Bak, Stanley and Bogomolov, Sergiy and Hekal, Abdelrahman and Kochdumper, Niklas and Lew, Ethan and Mata, Andrew and Rahmati, Amir},
  booktitle={ACM International Conference on Hybrid Systems: Computation and Control (HSCC)},
  month=5,
  year={2024}
}

@inproceedings{youtube_cryptoscam,
  title={Like, Comment, Get Scammed: Characterizing Comment Scams on Media Platforms},
  author={Li, Xigao and Rahmati, Amir and Nikiforakis, Nick},
  booktitle={Network and Distributed System Security Symposium (NDSS)},
  month=2,
  year={2024}
}

@article{provable_noise,
  title={Provable Observation Noise Robustness for Neural Network Control Systems},
  author={Krish, Veena and Mata, Andrew and Hobbs, Kerianne and Bak, Stanley and Rahmati, Amir},
  journal={Research Directions: Cyber-Physical Systems},
  month=11,
  year={2023}
}


@article{icdinjection,
  title={Synthesizing Pareto-Optimal Signal-Injection Attacks on ICDs},
  author={Krish, Veena and Paoletti, Nicola and Smolka, Scott A. and Rahmati, Amir},
  journal={IEEE Access},
  year={2023}
}

@inproceedings{erebus,
  title={Erebus: Access Control for Augmented Reality Systems},
  author={Goutam, Sanket and Kim, Yoonsang and Rahmati, Amir and Kaufman, Arie},
  booktitle={USENIX Security Symposium (USENIX Sec)},
  year={2023}
}

@inproceedings{scannerscope,
  title={Scan Me If You Can: Understanding and Detecting Unwanted Vulnerability Scanning},
  author={Li, Xigao and Azad, Babak Amin and Rahmati, Amir and Nikiforakis, Nick},
  booktitle={The Web Conference (WWW)},
  year={2023}
}

@inproceedings{crt,
 author = {Vaishnavi, Pratik and Eykholt, Kevin and Rahmati, Amir},
 booktitle = {Advances in Neural Information Processing Systems},
 title = {Accelerating Certified Robustness Training via Knowledge Transfer},
 year = {2022}
}

@inproceedings{rrm,
  title={Transferring Adversarial Robustness Through Robust Representation Matching},
  author={Vaishnavi, Pratik and Eykholt, Kevin and Rahmati, Amir},
  booktitle={USENIX Security Symposium (USENIX Sec)},
  year={2022}
}

@inproceedings{compress_cert,
  title={On the Feasibility of Compressing Certifiably Robust Neural Networks},
  author={Vaishnavi, Pratik and Krish, Veena and Ahmed, Farhan and  Eykholt, Kevin and Rahmati, Amir},
  booktitle={Workshop on Trustworthy and Socially Responsible Machine Learning (TSRML)},
  year={2022}
}

@inproceedings{ares,
    title={Ares: A System-Oriented Wargame Framework for Adversarial ML},
    author={Ahmed, Farhan  and Vaishnavi, Pratik  and Ekyholt, Kevin  and Rahmati, Amir },
    booktitle={IEEE Security and Privacy Workshops (SPW)},
    year={2022}
}

@inproceedings{goodbotbadbot,
  title={Good bot, bad bot: Characterizing automated browsing activity},
  author={Li, Xigao and Azad, Babak Amin and Rahmati, Amir and Nikiforakis, Nick},
  booktitle={IEEE symposium on security and privacy (S\&P)},
 year={2021}
}

@inproceedings{ar_privacy,
    title={Design of Privacy Preservation System in Augmented Reality},
    author={Kim, Yoonsang and Boorboor Saeed and Rahmati, Amir and Kaufman, Arie},
    booktitle={IEEE Symposium on Visualization for Cyber Security (VizSec)},
    year={2021}
}

@inproceedings{viscr,
  title={An Intent-Based Automation Framework for Securing Dynamic Consumer IoT Infrastructures},
  author={Nagendra, Vasudevan and Bhattacharya, Arani and Yegneswaran, Vinod and Rahmati, Amir and Das, Samir},
  booktitle={The Web Conference (WWW)},
  year={2020}
}

@inproceedings{valve,
  title={Valve: Securing Function Workflows on Serverless Computing Platforms},
  author={Datta, Pubali and Kumar, Prabuddha and Morris, Tristan and Grace, Michael and Rahmati, Amir and Bates, Adam},
  booktitle={The Web Conference},
  year={2020}
}

@article{attentionmask,
  title={Can Attention Masks Improve Adversarial Robustness?},
  author={Vaishnavi, Pratik and Cong, Tianji and Eykholt, Kevin and Prakash, Atul and Rahmati, Amir},
  journal={Workshop on Engineering Dependable and Secure Machine Learning Systems (EDSMLS)},
  year={2020}
}

@article{model-agnostic-arxiv,
  title={Towards Model-Agnostic Adversarial Defenses using Adversarially Trained Autoencoders},
  author={Vaishnavi, Pratik and Eykholt, Kevin and Prakash, Atul and Rahmati, Amir},
  journal={arXiv preprint arXiv:1909.05921},
  year={2019}
}

@inproceedings{wearsys19,
  title={Protecting Visual Information in Augmented Reality from Malicious Application Developers},
  author={Jensen, Jk and Hu, Jinhan and Rahmati, Amir and LiKamWa, Robert},
  booktitle={ACM Workshop on Wearable Systems and Applications (WearSys)},
  year={2019}
}

@inproceedings{difttt,
  title={Decentralized action integrity for trigger-action IoT platforms},
  author={Fernandes, Earlence and Rahmati, Amir and Jung, Jaeyeon and Prakash, Atul},
  booktitle={USENIX Network and Distributed System Security Symposium (NDSS)},
  year={2018}
}

@inproceedings{roadsign,
  title={Robust physical-world attacks on deep learning visual classification},
  author={Eykholt, Kevin and Evtimov, Ivan and Fernandes, Earlence and Li, Bo and Rahmati, Amir and Xiao, Chaowei and Prakash, Atul and Kohno, Tadayoshi and Song, Dawn},
  booktitle={IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},
  year={2018}
}

@inproceedings{objdetector,
  title={Physical adversarial examples for object detectors},
  author={Eykholt, Kevin and Evtimov, Ivan and Fernandes, Earlence and Li, Bo and Rahmati, Amir and Tram{\`e}r, Florian and Prakash, Atul and Kohno, Tadayoshi and Song, Dawn},
  booktitle={USENIX Workshop on Offensive Technologies (WOOT)},
  year={2018}
}

@inproceedings{attention,
  title={ATtention Spanned: Comprehensive Vulnerability Analysis of $\{$AT$\}$ Commands Within the Android Ecosystem},
  author={Tian, Dave Jing and Hernandez, Grant and Choi, Joseph I and Frost, Vanessa and Raules, Christie and Traynor, Patrick and Vijayakumar, Hayawardh and Harrison, Lee and Rahmati, Amir and Grace, Michael},
  booktitle={USENIX Security Symposium (USENIX Sec)},
  year={2018}
}

@inproceedings{tyche,
  title={Tyche: A risk-based permission model for smart homes},
  author={Rahmati, Amir and Fernandes, Earlence and Eykholt, Kevin and Prakash, Atul},
  booktitle={IEEE Cybersecurity Development (SecDev)},  
  year={2018}
}

@inproceedings{heimdall,
  title={Heimdall: A Privacy-Respecting Implicit Preference Collection Framework},
  author={Rahmati, Amir and Fernandes, Earlence and Eykholt, Kevin and Chen, Xinheng and Prakash, Atul},
  booktitle={International Conference on Mobile Systems, Applications, and Services (MobiSys)},
  year={2017}
}

@article{objdetector-arxiv,
  title={Note on attacking object detectors with adversarial stickers},
  author={Eykholt, Kevin and Evtimov, Ivan and Fernandes, Earlence and Li, Bo and Song, Dawn and Kohno, Tadayoshi and Rahmati, Amir and Prakash, Atul and Tramer, Florian},
  journal={arXiv preprint arXiv:1712.08062},
  year={2017}
}

@inproceedings{iotpermsec,
  title={The Security Implications of Permission Models of Smart Home Application Frameworks},
  author={Fernandes, Earlence and Rahmati, Amir and Jung, Jaeyeon and Prakash, Atul},
  booktitle={IEEE Security and Privacy},
  year={2017}
}

@inproceedings{rehash,
  title={Internet of things security research: A rehash of old ideas or new intellectual challenges?},
  author={Fernandes, Earlence and Rahmati, Amir and Eykholt, Kevin and Prakash, Atul},
  booktitle={IEEE Security and Privacy},
  year={2017}
}

@inproceedings{ifttt-vs-zapier,
  title={IFTTT vs. Zapier: A comparative study of trigger-action programming frameworks},
  author={Rahmati, Amir and Fernandes, Earlence and Jung, Jaeyeon and Prakash, Atul},
  booktitle={arXiv preprint arXiv:1709.02788},
  year={2017}
}

@inproceedings{contexiot,
title={{ContexIoT}: Towards Providing Contextual Integrity to Appified IoT Platforms},
author={Yunhan Jack Jia and Qi Alfred Chen and Shiqi Wang and Amir Rahmati and Earlence Fernandes and Z. Morley Mao and Atul Prakash},
booktitle={USENIX Network and Distributed System Security Symposium (NDSS)},
year = {2017}
}

@inproceedings{flowfence,
  title={{FlowFence}: Practical Data Protection for Emerging {IoT} Application Frameworks},
  author={Fernandes, Earlence and Paupore, Justin and Rahmati, Amir and Simionato, Daniel and Conti, Mauro and Prakash, Atul},
  booktitle={USENIX Security Symposium (USENIX Sec)},
  year={2016}
}

@inproceedings{opacified_comp,
  title={Applying the Opacified Computation Model to Enforce Information Flow Policies in {IoT} Applications},
  author={Rahmati, Amir and Fernandes, Earlence and Prakash, Atul},
  booktitle={IEEE Cybersecurity Development Conference (SecDev)},
  year={2016}
}

@inproceedings{opinion_repo,
  title={Towards Comprehensive Repositories of Opinions},
  author={Han Zhang and Kasra Edalat-Nejad and Amir Rahmati and Harsha V. Madhyastha},
  booktitle={ACM Workshop on Hot Topics in Networks (HotNets)},
  year={2016}
}

@inproceedings{flash_storage,
  title={Approximate Flash Storage: A Feasibility Study},
  author={Rahmati, Amir and Hicks, Matthew and Prakash, Atul},
  booktitle={ASPLOS Workshop on Approximate Computing Across the System Stack (WAX)},
  year={2016}
}

@inproceedings{tardisJournal,
  title={Persistent Clocks for Batteryless Sensing Devices},
  author={Hester, Josiah and Tobias, Nicole and Rahmati, Amir and Sitanayah, Lanny and Holcomb, Daniel and Fu, Kevin and Burleson, Wayne P and Sorber, Jacob},
  booktitle={Transactions on Embedded Computing Systems (TECS)},
  year={2016}
}

@inproceedings{earlenceoakland,
  title={Security Analysis of Emerging Smart Home Applications},
  author={Fernandes, Earlence and Jung, Jaeyeon and Prakash, Atul},
  booktitle={IEEE Symposium on Security and Privacy (S\&P)},
  year={2016}
}

@article{drvfpJournal,
  title={Reliable physical unclonable functions using data retention voltage of sram cells},
  author={Xu, Xiaolin and Rahmati, Amir and Holcomb, Daniel E and Fu, Kevin and Burleson, Wayne},
  journal={IEEE Transactions on CAD: Special Section on Hardware Security and Trust (TCAD)},
  year={2015},
}

@inproceedings{contextAC,
  title={Context-Specific Access Control: Conforming Permissions With User Expectations},
  author={Rahmati, Amir and Madhyastha, Harsha V},
  booktitle={ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM)},
  year={2015},
}

@inproceedings{probable_cause,
  title={{Probable Cause}: The deanonymizing effects of approximate {DRAM}},
  author={Rahmati, Amir and Hicks, Matthew and Holcomb, Daniel E and Fu, Kevin},
  booktitle={ACM International Symposium on Computer Architecture (ISCA)},
  year={2015},
}

@inproceedings{refreshdram,
  title={Refreshing thoughts on {DRAM}: Power saving vs. data integrity},
  author={Rahmati, Amir and Hicks, Matthew and Holcomb, Daniel and Fu, Kevin},
  booktitle={ASPLOS Workshop on Approximate Computing Across the System Stack (WACAS)},
  year={2014}
}

@inproceedings{stateRepression,
  title={Cyber Dimentions of State Repression},
  author={Meredith Blank, Anita Ravishankar, Amir Rahmati},
  booktitle={Cyber Conflict Project Report},
  year={2014}
}

@inproceedings{insiderLeaks,
  title={Under What Circumstances Are Insider Leaks Justified?},
  author={Ben Lusher, Kathryn Reeves, Amir Rahmat},
  booktitle={Cyber Conflict Project Report},
  year={2014}
}

@inproceedings{saiwork,
  title={Malware Prognosis: How to Do Malware Research in Medical Domain},
  author={Gouravajhala, Sai R. and Rahmati, Amir and Honeyman, Peter and Fu, Kevin},
  booktitle={USENIX Workshop on Health Information Technologies (Health Tech)},
  year={2014}
}

@inproceedings{wattsupdoc,
  title={{WattsUpDoc}: Power side channels to nonintrusively discover untargeted malware on embedded medical devices},
  author={Clark, Shane S and Ransford, Benjamin and Rahmati, Amir and Guineau, Shane and Sorber, Jacob and Xu, Wenyuan and Fu, Kevin},
  booktitle={USENIX Workshop on Health Information Technologies (Health Tech)},
  year={2013}
}

@inproceedings{irancensor,
  title={Internet censorship in {Iran}: A first look},
  author={Rahmati, Amir and Aryan, Homa and Halderman, J Alex},
  booktitle={USENIX Workshop on Free and Open Communications on the Internet (FOCI) [Anonymous Publication]},
  year={2013}
}

@inproceedings{drvfp,
  title={DRV-Fingerprinting: using data retention voltage of SRAM cells for chip identification},
  author={Holcomb, Daniel E and Rahmati, Amir and Salajegheh, Mastooreh and Burleson, Wayne P and Fu, Kevin},
  booktitle={Workshop On RFID Security And Privacy (RFIDsec)},
  year={2012},
}

@inproceedings{tardis,
  title={{TARDIS}: Time and remanence decay in {SRAM} to implement secure protocols on embedded devices without clocks},
  author={Rahmati, Amir and Salajegheh, Mastooreh and Holcomb, Dan and Sorber, Jacob and Burleson, Wayne P and Fu, Kevin},
  booktitle={USENIX Security Symposium (USENIX Sec)},
  year={2012}
}

@misc{EthosLab,
author = {},
title = {Ethos Lab · GitHub},
howpublished = {\url{https://github.com/Ethos-lab}},
}